Analysis
-
max time kernel
110s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 12:49
Static task
static1
Behavioral task
behavioral1
Sample
941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284.exe
Resource
win10v2004-20220812-en
General
-
Target
941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284.exe
-
Size
799KB
-
MD5
6f16b625b4cb9aeaedbe67ffd7e81f30
-
SHA1
68f2bc770df5d1fa1a930f2d5aea9166777f8d65
-
SHA256
941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284
-
SHA512
143aeb379f9e066f1a6e725c1aa9838e8b4be264477c26bcd6da8b1a1f9f16be669a9557b7c290021556f9cd44a0210930ff3ae1617c497800192de6c144139f
-
SSDEEP
24576:0h4V8DrAJ1XiMHwLwJziIepnIEPdPiw/k8V7:0h+8Dr31kJObnIIPiw/k
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4924 3180 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284.exe"C:\Users\Admin\AppData\Local\Temp\941a6851a10f06b166d6d0a34b7a6c86b95d4597faa0f874f9cddbf7daa6a284.exe"1⤵PID:3180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3180 -s 6122⤵
- Program crash
PID:4924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3180 -ip 31801⤵PID:4900